This article examines the development of Microsoft’s Azure SRE Agent, designed to mitigate operational toil in mission-critical environments. By utilizing an "agentic workflow" of specialized AI agents, Microsoft has integrated automation across the entire software development lifecycle. This human-AI partnership has autonomously resolved over 35,000 incidents and saved more than 50,000 developer hours, accelerating root cause analysis and mitigation while maintaining rigorous governance and human oversight.
GitHub Agentic Workflows are built with isolation, constrained outputs, and comprehensive logging. Learn how our threat model and security architecture help teams run agents safely in GitHub Actions.
This post explains how we built Agentic Workflows with security in mind from day one, starting with the threat model and the security architecture that it needs. It details the defense in depth approach using substrate, configuration, and planning layers, emphasizing zero-secret agents through isolation and careful exposure of host resources. It also highlights the staging and vetting of all writes using safe outputs, and comprehensive logging for observability and future information-flow controls.
This post explains how we built Agentic Workflows with security in mind from day one, starting with the threat model and the security architecture that it needs. It details the defense in depth approach using substrate, configuration, and planning layers, emphasizing zero-secret agents through isolation and careful exposure of host resources. It also highlights the staging and vetting of all writes using safe outputs, and comprehensive logging for observability and future information-flow controls.
